EIP-2026-111426

This exploit demonstrates a cross-site scripting (XSS) vulnerability in PostNuke by injecting malicious JavaScript code via the 'topic' and 'sid' parameters in the URL. The PoC shows how an attacker can execute arbitrary script code in the context of the victim's browser session.